Court Rules

Privacy Enforcement Tracker

1,285 enforcement actions from 14 federal and state jurisdictions. Every event traced back to its official government source.

1,285

Total Actions

14

Jurisdictions

$35.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
FTCConsent Decree

Rite Aid

The FTC settled charges that Rite Aid deployed AI facial recognition technology in hundreds of stores from 2012 to 2020 without reasonable safeguards, resulting in false-positive matches that disproportionately harmed women and people of color. The proposed order bans Rite Aid from using facial recognition for surveillance for five years and requires comprehensive biometric data safeguards, data deletion, consumer notifications, and a certified security program.

HighBiometric DataSecurity FailureDark Patterns
NYEnforcement ActionMultistate

Meta

A coalition of 42 attorneys general filed a federal lawsuit against Meta, alleging that the company designed addictive features that harm youth mental health and violated COPPA by collecting children's data without parental consent. The lawsuit seeks injunctive relief, monetary penalties, and restitution.

HighChildren's DataConsent FailureDark Patterns
CTEnforcement Action

Stone Academy, Paier College of Art, Joseph Bierbaum(Stone Academy)

Connecticut Attorney General William Tong sued Stone Academy, its owner Joseph Bierbaum, and Paier College of Art for violating the Connecticut Unfair Trade Practices Act by deceiving students about the nursing program's quality, clinical hours, and faculty qualifications while diverting funds to other businesses. The lawsuit seeks millions in civil penalties, restitution for students, disgorgement of profits, appointment of a receiver, and attachment of assets including Bierbaum's mansion.

HighDark Patterns
FTCSettlement

GoodRx Holdings Inc.(GoodRx)

The FTC settled with GoodRx for sharing consumers' sensitive prescription and health information with Facebook, Google, and other third parties for advertising without consent, and for failing to report these unauthorized disclosures as required by the Health Breach Notification Rule. GoodRx will pay a $1.5 million civil penalty and is permanently barred from sharing user health data for advertising.

HighConsent FailureHealth DataNotice Failure

$1.5M

Explore Enforcement Data